CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
Security
CISA: CISA Urges Organizations to Incorporate the FCC Covered List Into Risk Management Plans
CISA Urges Organizations to Incorporate the FCC Covered List Into Risk Management Plans The Federal Communications Commission (FCC) maintains a Covered...
CISA: CISA Releases One Industrial Control Systems Advisory
CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on May 2, 2023. These...
Cobalt Stike Beacon Detected – 47[.]92[.]126[.]126:8081
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 172[.]245[.]92[.]205:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 110[.]40[.]154[.]190:2233
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]27[.]186[.]74:2086
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 52[.]86[.]146[.]71:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]221[.]101[.]90:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]102[.]120[.]55:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]242[.]177[.]154:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 104[.]206[.]226[.]45:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
NTLMRecon – A Tool For Performing Light Brute-Forcing Of HTTP Servers To Identify Commonly Accessible NTLM Authentication Endpoints
NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath (AKA pwnfoo). NTLMRecon can be leveraged...
Malware Analysis – smokeloader – 2d905075e3f781cdad5a6bc1b518f844
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2d905075e3f781cdad5a6bc1b518f844SHA1: 2b2f2e6e4ed798d697d05b83a4fc8953ac61fc60ANALYSIS DATE: 2023-05-07T05:33:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 41476924126a3f0ee8dbd9f697735fe4
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 41476924126a3f0ee8dbd9f697735fe4SHA1: 04177fd9a26c89e14e2418c15a743b01c73d7ec0ANALYSIS DATE: 2023-05-07T05:32:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – f1e1ba13f25549b988930f91f2f53893
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1e1ba13f25549b988930f91f2f53893SHA1: 64b6305e491d7f580f778079da92d7da8be6b3a3ANALYSIS DATE: 2023-05-07T05:40:59ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – dc394d3ea860194695edd3d3ba78bde3
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dc394d3ea860194695edd3d3ba78bde3SHA1: 4f9a35af35b6b12fb872f00df2c550882831fbc1ANALYSIS DATE: 2023-05-07T05:37:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – c4401de2c4da49d29d12f48570296fab
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c4401de2c4da49d29d12f48570296fabSHA1: cbe0bef2c02c161fe74187765ac8747b34b1529eANALYSIS DATE: 2023-05-07T05:41:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – d52c74423536ade5ec030bf7cf3ab8b6
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d52c74423536ade5ec030bf7cf3ab8b6SHA1: ca0bcf07c5776222f2059525c347aeaf73a13a4aANALYSIS DATE: 2023-05-07T05:41:28ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 353aff57fdc7340fcadf07f73e69ad01
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 353aff57fdc7340fcadf07f73e69ad01SHA1: d918594228069464e4214762ce0b6bae4c4c1cd3ANALYSIS DATE: 2023-05-07T05:47:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 6c3ed51f315ea798ae0763a4a5345125
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6c3ed51f315ea798ae0763a4a5345125SHA1: 445945a3bff4cc8a6066cf24848f3d42f969c0a4ANALYSIS DATE: 2023-05-07T05:44:37ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – f4216cd1c58ff5a369888e88dd831819
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f4216cd1c58ff5a369888e88dd831819SHA1: 9b5733d68ba4d8d8d1f5f330577ea2ef032dd69aANALYSIS DATE: 2023-05-07T05:50:36ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 33b2edf923538aa7a7d4b0a91e2f8939
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 33b2edf923538aa7a7d4b0a91e2f8939SHA1: 7749af7d341c73d641b5032ebccf13abc47b606aANALYSIS DATE: 2023-05-07T05:49:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – evasion – b13905aed28c627d8a37058d885a5237
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: b13905aed28c627d8a37058d885a5237SHA1: 6e86898992119c689905c286d813e06a6fd6922cANALYSIS DATE: 2023-05-07T05:51:22ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...
